5997 Commits

Author	SHA1	Message	Date
github-actions[bot]	877bfa2468	Release preparation for version 2.17.5	2024-06-10 13:40:39 +00:00
am0o0	9db334d02f	update select statement, update test cases	2024-06-07 21:26:20 +02:00
am0o0	5e0a78c4c7	make predicate for env key and value nodes, use propertyRead/Write instead of API nodes to find env key and value assignments, fix a bug thanks to @erik-krogh	2024-06-07 21:15:30 +02:00
aegilops	7ee5655f31	Merge branch 'aegilops/js/insecure-helmet-middleware' of https://github.com/aegilops/codeql into aegilops/js/insecure-helmet-middleware	2024-06-07 15:50:15 +01:00
aegilops	975811ae59	Change layout of qhelp example code	2024-06-07 15:50:06 +01:00
Paul Hodgkinson	43a140e62c	Merge branch 'main' into aegilops/js/insecure-helmet-middleware	2024-06-07 15:46:18 +01:00
aegilops	7136763c37	Formatting	2024-06-07 15:36:39 +01:00
aegilops	465d64a810	Removed br tags	2024-06-07 15:34:45 +01:00
aegilops	29322f5ff0	Merge branch 'aegilops/js/insecure-helmet-middleware' of https://github.com/aegilops/codeql into aegilops/js/insecure-helmet-middleware	2024-06-07 15:32:23 +01:00
aegilops	f5d465f08a	Added data extension to allow setting extra required Helmet features	2024-06-07 15:32:11 +01:00
am0o0	b9e3b3310e	update the remote flow based query thanks to @erik-krogh, update tests and separate the local and remote query tests	2024-06-07 06:01:49 +02:00
Am	af016f9416	Merge branch 'github:main' into amammad-js-JWT	2024-06-06 15:33:26 +03:30
am0o0	8258e377dd	use PascalCase for URLConstructorLabel	2024-06-06 14:00:56 +02:00
am0o0	d27a378008	change query-id to avoid duplicate ids	2024-06-06 13:59:58 +02:00
Am	e3e59e02e5	Merge branch 'github:main' into amammad-js-CodeInjection_dynamic_import	2024-06-04 16:22:06 +04:00
github-actions[bot]	906b65d09c	Post-release preparation for codeql-cli-2.17.4	2024-05-28 18:02:25 +00:00
github-actions[bot]	33b4ae8bbb	Release preparation for version 2.17.4	2024-05-28 15:44:32 +00:00
maikypedia	e96c3a36ad	Move Apollo to experimental	2024-05-27 12:24:48 +02:00
maikypedia	cfd7c7a47c	move change-note to javascript/ql/src/change-notes	2024-05-27 11:57:05 +02:00
am0o0	1fc481ce81	v2: it is basically the first stable version :))	2024-05-25 20:43:36 +02:00
am0o0	14daf58767	update tests, add test cases for query with local sources	2024-05-25 18:17:56 +02:00
am0o0	b397f57357	change queries id according to new naming	2024-05-25 13:53:33 +02:00
am0o0	300c82a8ff	use Verification instead of validation in files name	2024-05-25 13:52:32 +02:00
am0o0	76beffb04a	change dir name	2024-05-25 13:49:34 +02:00
am0o0	f1533f40b6	change query files name	2024-05-25 13:49:01 +02:00
am0o0	d2d945c66d	merge all JWT pkgs into one	2024-05-25 13:47:43 +02:00
am0o0	4af4040bd6	change duplicate query IDs	2024-05-25 13:29:16 +02:00
am0o0	f905ac10c4	add jsonWebToken library file to remove duplicate predicate declrations	2024-05-25 13:28:13 +02:00
Erik Krogh Kristensen	c743abad54	Merge pull request #14294 from am0o0/amammad-js-CodeInjection_execa ... JS: provide command execution sinks for execa package	2024-05-24 09:20:19 +02:00
Dave Bartolomeo	613ccaac1d	Add change note to all v1.0.0 packs	2024-05-23 13:01:22 -04:00
Dave Bartolomeo	ffe4c8c87b	Update all pack versions to 1.0.0	2024-05-22 13:39:08 -04:00
am0o0	c470c078dc	move to experimental	2024-05-21 22:42:16 +02:00
Paul Hodgkinson	65dfd4c860	Merge branch 'main' into aegilops/js/insecure-helmet-middleware	2024-05-21 14:46:49 +01:00
aegilops	68e21a594a	Fixed query help formatting issues	2024-05-21 14:35:18 +01:00
aegilops	83037b1195	Adjust structure to avoid warnings about message	2024-05-21 13:51:13 +01:00
erik-krogh	c166cb406a	Merge branch 'main' into amammad-js-CodeInjection_execa	2024-05-21 08:48:12 +02:00
aegilops	3a885eaf9f	Insecure Helmet middle configuration - frameguard or CSP to 'false'	2024-05-20 11:58:55 +01:00
Asger F	499c4df79b	Merge pull request #13554 from am0o0/amammad-js-bombs ... JS: Decompression Bombs	2024-05-16 13:25:41 +02:00
erik-krogh	56dff8540f	add an example of how to get a floating point value between 0 and 1	2024-05-16 11:15:07 +02:00
erik-krogh	066f3b61a2	RandomSource is deprecated, it's crypto now	2024-05-16 11:14:50 +02:00
github-actions[bot]	32e8b5c667	Post-release preparation for codeql-cli-2.17.3	2024-05-14 21:14:08 +00:00
github-actions[bot]	100166fa53	Release preparation for version 2.17.3	2024-05-14 19:23:18 +00:00
erik-krogh	39a8b49222	add qhelp recommendation that you can use an obvious placeholder value	2024-05-03 19:37:31 +02:00
erik-krogh	ff85db36e2	exclude credentials as kind key from hardcoded-credentials when the key looks like a dummy password	2024-05-03 13:58:11 +02:00
github-actions[bot]	99928b82ed	Post-release preparation for codeql-cli-2.17.2	2024-04-30 12:15:35 +00:00
github-actions[bot]	5228d94d42	Release preparation for version 2.17.2	2024-04-30 10:25:51 +00:00
erik-krogh	baa31e1469	delete outdated deprecations	2024-04-25 22:19:28 +02:00
Alexander Eyers-Taylor	da3fa22cbd	Merge pull request #16228 from github/post-release-prep/codeql-cli-2.17.1 ... Post-release preparation for codeql-cli-2.17.1	2024-04-17 11:24:34 +01:00
Asger F	ed80e4e284	JS: Change note	2024-04-17 08:41:27 +02:00
github-actions[bot]	622e176a16	Post-release preparation for codeql-cli-2.17.1	2024-04-16 14:21:32 +00:00